Service Control PoliciesResource Control PoliciesDeclarative PoliciesTag, Backup & AI Opt-Out Policies
Config Rules
CloudWatch Alarms and Event Rules
CloudFormation Guard Rules
Logging & Monitoring Configurations
Backups & DR
Auto Remediation Rules
Conformance Packs
Billing and Cost Management
S3 Bucket Policies
Security Groups & NACLs
IAM Policies
VPC Endpoint Policies
VPC Security Controls
EC2 Security Controls
IAM Security Controls
S3 Security Controls
RDS Security Controls
OpenSearch/Elasticsearch Security Controls
EFS Security Controls
Route53 Security Controls
Amazon DynamoDB & DAX
ECR Security Controls
EMR Security
Lambda SecurityCloudFormation Security
CodeX Security Controls
CloudFront Security
AWS Certificate Manager (ACM) Security
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network FirewallRoute53 Resolver Security
Amazon Macie
AWS WAF & Shield
AWS Secrets Manager
AWS Systems Manager
AWS KMS
AWS SSO
Load Balancers & Auto Scaling
RDS Event Subscriptions
AWS Resource Access Manager (RAM)
Amazon ECS
Amazon EKS
Amazon API Gateway
AWS AppConfig
Amazon AppFlow
AWS App Mesh
AWS App Runner
AWS AppSync
Application Auto Scaling
Amazon Athena
AWS Batch
AWS Billing Conductor
AWS Clean Rooms
AWS SNS
AWS SQS
AWS Service Discovery
AWS Step Functions
AWS CloudTrailAWS Config
Amazon EventBridgeAWS CloudWatch
AWS Cognito
Amazon Connect
AWS Glue
AWS Data Pipeline & Data Sync
Amazon Detective
AWS DevOps Guru
Amazon DocumentDB
Amazon ElastiCache
AWS Elastic Beanstalk
Amazon FSx
Amazon MQ
Amazon PrometheusAmazon Cassandra
Amazon FinSpace
AWS Fault Injection Simulator
Amazon GameLift
AWS Global Accelerator
Amazon Grafana
AWS IoT GreenGrass
AWS IoT Services
AWS Ground Station
Amazon IVS (Interactive Live Streams)
Amazon Kinesis
AWS LakeFormation
Amazon Lookout
Amazon Managed Blockchain
AWS Media Services
AWS Managed Apache Airflow
AWS OpsWorksAWS Organizations
Amazon Personalize
Amazon QLDB
Amazon Redshift
Amazon Rekognition
AWS Resource ExplorerAWS Resource Groups
Amazon Lex & Alexa
AWS RoboMaker
Amazon SageMaker
AWS Service Catalog
Amazon SES
AWS SimSpace Weaver
AWS Support App
AWS Transfer
AWS X-Ray
AWS Amplify
AWS Appstream
AWS Audit ManagerAmazon Bedrock
AWS Cloud9
AWS CloudHSM
Amazon Neptune
Amazon Quicksight
Configure the infrastructure for a three-tier web application that includes load balancing, EC2 instances and scaling groups, and an optional database tier
Create new VPCs with multiple subnet tier and internet connectivity configurations (or update existing VPCs), and enable common logging and connectivity options
Configure AWS Client VPN to allow direct connectivity to an AWS VPC from users' machines.
Configure AWS Backup to automatically backup AWS resources including EC2, EBS, EFS, DynamoDB, RDS, Aurora, Neptune, and DocumentDB. Supports replica region or account configuration for additional high availability.
Create a CI/CD pipeline to deploy AWS infrastructure using CloudFormation, while ensuring security with an automated inline static security analysis to detect any potential security misconfiguration
Configure essential AWS security logging and monitoring services (with email notifications for findings)
Create a central security account to delegate management of security services in an AWS organization
Set up hub and spoke accounts for a centralized logging architecture in a multi-account environment
© 2026 asecurecloud. All rights reserved.
